Authn Context Error on Setting up Duo

[Cantor, Scott]

On 6/30/17, 9:47 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at sudonym.me> wrote:

> It's impossible to know what went into a frankenimplementation, but
> you probably don't want to try to use Duo as a top-level flow by
> itself like that.

Entirely. Nate's response is accurate. You don't do it this way, the Duo implementation we provide is meant to be used via the MFA flow with rules coordinating what gets run. The delivered and documented examples make simple Password+Duo use very straightforward, the complexities only arise if you're trying to do opt-in or opt-out rules based on users. There are clear placeholders for you to insert your chosen 2FA authn context principal string in the configuration.

-- Scott